Trivy scanner now checks DOCKER_HOST env var and multiple socket paths:
- /var/run/docker.sock (Linux, Docker Desktop symlink)
- ~/.docker/run/docker.sock (macOS Docker Desktop)
- ~/.colima/default/docker.sock (Colima)
- $XDG_RUNTIME_DIR/podman/podman.sock (Podman)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>